MedQraft
← All insights
QMS / ISO 13485

ISO 13485 7.3.4 design outputs: connect requirements to drawings, specifications and acceptance criteria

Design outputs capture the design that implements input requirements.
Follow a fictional thermometer from requirements to component and assembly specifications, acceptance criteria and verification.

Last regulatory review: 2026-10-29 Rev. 1.0 9 min read

Design outputs turn requirements into a defined design

The purpose of design and development outputs is to capture the concrete design that implements the input requirements.
The outputs must be usable for making the device and for verifying whether the design meets those requirements.

An appearance drawing or a photograph of a prototype rarely tells another person which components to use, how to assemble them or what constitutes an acceptable result.

This article addresses ISO 13485:2016 clause 7.3.4, Design and development outputs.
The preceding article on clause 7.3.3 dealt with the use conditions, performance and safety requirements the device must meet.
Here, the focus moves to the components, structure, behaviour and information that implement those requirements, rather than revisiting the responsibilities and stage planning covered in clause 7.3.2.

The official MDSAP Audit Approach links clause 7.3.4 to traceability between outputs and inputs and identification of outputs essential to proper device functioning.
Outputs can include product and process drawings and specifications, testing information, labelling, packaging and applicable installation or servicing information.[1] The thermometer and document arrangements below are fictional examples developed by MedQraft.

Input requirements connect to a defined design, which supports both manufacture and verification
Figure 1.
Inputs define what must be achieved; outputs describe the resulting design.
They provide manufacturing information and a defined subject for verification.
The arrows do not signify completed verification.

A fictional thermometer: an accuracy requirement needs more than a sensor name

Assume a development team has approved inputs for an electronic thermometer intended for home use.
Measurement site, operating conditions and performance criteria have already been established using evidence appropriate to that device.
This article does not supply actual accuracy limits or assembly dimensions.

The team selects a sensor and designs its mounting arrangement and signal processing.
A note saying “use a high-precision sensor” leaves purchasing unsure what to order and production unsure how to position and secure it.
Component identification and specifications, mounting and joining conditions, and the relevant circuit and software designs must agree with one another.

The performance of an individual sensor does not automatically establish the accuracy of the finished thermometer.
In this example, mounting, signal processing, calibration and use conditions may need to be considered together.
The necessary design elements depend on the measurement technology.
The practical goal is to make it possible to locate the design results that implement each input.

Area addressed by an input Examples of concrete design outputs Information used in subsequent work
Measurement performance under defined conditions Selected sensor specification, relevant circuit and processing design, assembly drawing Components to purchase, structure to build and configuration to assess
Recognition that measurement is complete Display design, state definitions and relevant software specification Display and transitions to implement, expected behaviour
Prevention of confusion between invalid and valid results Error handling and display design selected through risk analysis Behaviour and assessment criteria for the relevant error conditions
Information needed during use Controlled labelling and instructions-for-use content Information to supply with the device and packaging

This table illustrates relationships rather than a complete device specification.
Phrases such as “defined conditions” and “selected sensor” would need to resolve to approved values and precise component or document identifiers in actual records.

Organize outputs around the work someone else must perform

It is useful to assess the outputs from the recipient's perspective rather than count documents.
The following arrangement is a MedQraft practice suggestion, not a requirement for identical document names or separate files for every device.

Purchasing needs a resolved component definition.
An internal nickname in a bill of materials or unclear substitution rules can lead to a component the designer did not intend.
Link the bill of materials to the appropriate specification and control any permitted alternatives and their conditions of use.

Production needs a reproducible structure and the relevant conditions.
A picture showing a sensor's approximate location leaves room for different assembly decisions.
Define the necessary dimensions, tolerances, materials and joining conditions in the relevant drawings or instructions according to the product.
These are examples of information to consider, not a universal list for every device.

Inspection needs a defined characteristic and acceptance criteria.
“Check accuracy” does not establish the conditions or acceptable range.
Include the relevant criteria or a precise reference to them, and connect them to the applicable configuration and revision.
A value remembered by the designer is not a usable inspection reference.

Devices that require servicing also need appropriate service information.
Permitted inspection or replacement activities and associated checks should agree with the design.
A repair procedure should not be invented for a fictional device whose service model has not been defined.

One performance requirement connects to a sensor specification, assembly drawing and inspection criteria
Figure 2.
One input can connect to several outputs.
A sensor specification alone neither implements nor proves every aspect of the finished device's performance.

Defining a criterion is different from obtaining verification evidence

Linking conditions and acceptance criteria to the design outputs makes the intended assessment clear.
It does not produce a test result.
Having a criterion and demonstrating that the criterion has been met are different states.

For the fictional inspection document, an output review can establish whether the applicable configuration, conditions, method and acceptance criteria are identifiable.
Actual measurement or analysis, followed by comparison with those criteria, is needed to support a conclusion.
Design verification and routine production inspection can differ in purpose, test articles, sampling and methods; one inspection sheet should not be assumed to complete every assessment.

MDSAP describes design verification as obtaining objective evidence that outputs meet inputs.[1] Output preparation under clause 7.3.4 connects to verification under clause 7.3.6, but they are not the same activity.
Documenting the design also does not by itself complete validation for intended use or transfer to production.

Keep safety-relevant characteristics connected across documents

Suppose the fictional team's risk analysis identifies a need to distinguish a particular error state from a valid measurement.
A picture of the error screen is not enough on its own.
The relevant design must specify the conditions that trigger the behaviour and the associated display and response.
The assessment criteria must also address that state.

This is not a recommendation for a particular error-detection technique.
It illustrates how a selected risk control should continue into the actual design and assessment activities.
An organization may identify important characteristics with symbols or linked documents.
What matters is that their significance remains visible during changes, purchasing, manufacture and inspection.

Follow one requirement through the outputs before release

The following review questions are an original practice aid, to be used with the organization's review and approval procedures.
They are not a prescribed ISO form.

Connection to review Question
Input to output Can the drawing, specification or behaviour definition implementing this requirement be located?
Output to manufacture Are components, structure and applicable conditions specific and mutually consistent?
Output to acceptance decision Are criteria included or referenced precisely?
Risk control to design characteristic Are characteristics important to safety and proper use reflected in the design?
Review to release Have open issues and document discrepancies been addressed and the applicable outputs approved?
Preparation of design and criteria is distinguished from the evaluation that produces evidence
Figure 3.
A defined design and criteria prepare the assessment.
Actual evaluation results and comparison with those criteria are needed to determine whether requirements have been met.

If a drawing and bill of materials use incompatible revisions or a reference to inspection criteria is broken, do not leave the recipient to resolve the ambiguity.
Reconcile the information and release the approved outputs.
Later design changes require consideration of the affected outputs and assessment activities as well.

Sources and scope

  1. MDSAP Audit Approach, MDSAP AU P0002.011, revision dated 3 August 2026.
    Chapter 5 Task 7 discusses outputs and verification; Task 13 addresses design transfer.
    Official document page.
  2. Official ISO 13485:2016 publication information.
    The third edition, published in 2016, is identified as current following confirmation in 2025.

Checked on 29 October 2026.
This is an original explanation based on public official sources, not the complete standard or an official translation.
Tables, diagrams and the thermometer scenario are MedQraft practice illustrations.
Actual component selection, inspection conditions, limits and applicable requirements need device-specific evidence.

Related articles

Continue through ISO 13485 clauses

Compare clause purposes and supporting evidence

Let's talk

Apply what you have read
to your product.

Tell us your product's current stage and the questions you need to review.

Discuss your questions ↗
MedQraft / Let's talk

Project inquiry

Start with your challenge.
We will work through it together.

Tell us your product's current stage and the support you need.
We will review the questions and define a suitable scope of support.

Contact@medqraft.co.kr ↗
Information: name, company, email, inquiry and service of interest · Purpose: responding to your inquiry · Retention: until the inquiry is resolved Read the privacy policy
Privacy policy

MedQraft / Privacy

Privacy policy

MedQraft processes only the information needed for website inquiries.
We delete the collected inquiry information when the inquiry is resolved.

Effective date: September 18, 2026

1. Scope and purposes of processing

This policy applies to visits and business inquiries at www.medqraft.co.kr.
We process personal information to review and respond to inquiries, discuss the scope of support, and operate the website reliably.
Customer business data stored in Q-Atelier is governed by the relevant service agreement and separate notices.

2. Information collected and retention

Required information
Name, email address and inquiry
Optional information
Company, selected service of interest, and contact or business details you provide in your inquiry
Collection methods
Website inquiry forms and email inquiries
Basis for processing
Consent to collection and use provided through the inquiry form.
Where necessary to fulfill a request relating to the formation or performance of a contract, we process information on the applicable legal basis.
Retention period
We retain inquiry information until the inquiry is resolved, then delete it without delay.
If information becomes part of a separate contract, we separately explain the required information and retention period.
Where retention is legally required, only the relevant information is stored separately.

You may decline to provide required information, but this will prevent submission of the website inquiry form.
You can make an inquiry without providing optional information.
Do not submit sensitive information unnecessary for the inquiry, such as national identification numbers or patient information.

3. Service providers and external services

Inquiries are forwarded from the website server through an email delivery service to our company mailbox.
We do not maintain a separate inquiry database in this processing workflow.

Vercel Inc.
Website hosting, server-side inquiry processing, operations and security.
Technical information such as IP address, request time, browser and request details may be processed.
Plus Five Five, Inc. (Resend)
Delivery of inquiry notification emails containing name, email, company, service of interest and inquiry details, and management of delivery logs
Gabia Hiworks
Receipt, storage and replies to inquiries in our company mailbox

We do not sell inquiry information or provide it for advertising purposes.
We do not disclose it for an independent third party's purposes unless there is a lawful basis, such as a legal requirement or separate consent.

4. Overseas processing and storage

Overseas cloud services are used to process website requests and deliver emails.
Information entered in an inquiry is transmitted over an encrypted connection upon submission.

Vercel Inc. / United States
Information is transmitted for inquiry request processing and hosting.
Privacy contact: privacy@vercel.com.
Operational records are subject to the retention periods of the services and settings used and Vercel's processing policies.
Vercel data processing information
Plus Five Five, Inc. (Resend) / United States
Information is transmitted upon submission to deliver the inquiry email and manage delivery records.
Privacy contact: privacy@resend.com.
Resend's published default retention period for emails and logs on its standard plans is 30 days.
Earlier deletion may be requested from the provider.
Resend retention and deletion information

Deleting inquiry emails from our mailbox and deleting technical records held by external providers involve different processes.
You may contact the person listed below about deletion, restriction of processing or overseas processing.
If you do not wish to use overseas processing through the website form, you may email us directly.
The processing policies of the email services used will still apply.

5. Deletion and safeguards

After confirming that an inquiry has been resolved, we delete the email and separately saved copies.
Printed materials, if any, are destroyed by shredding or another method that prevents reuse.
Where deletion of information held by an external processor is necessary, we submit a request through that provider's deletion procedure.

Access to personal information is restricted to staff who need it for their work.
We protect information through HTTPS transmission and account access controls.
We do not publish materials containing personal information in public repositories or on public pages.

6. Your rights

You may request access, correction, deletion, restriction of processing or withdrawal of consent by contacting the designated email address.
We will verify your identity to the extent necessary, process the request under applicable law, and notify you of the result.
If we cannot fulfill a request, for example because of a legal retention obligation, we will explain the reason.
For requests made through a representative, we may verify their authority.

7. Access information and external content

We use Naver conversion tracking to measure visits and completed inquiries attributable to Naver search advertising.
Technical information such as the visited URL, referring page, browser and cookies, and whether an inquiry was completed, may be processed.
The name, email, company and inquiry text entered in the form are not included in conversion events.
You can block or delete cookies in your browser.

Server access information may be processed for website delivery and security.
Vercel Web Analytics is used for anonymous visitor statistics on the introduction page and Insights.
Insights statistics aggregate article views, referral sources, countries and device types.
Visitor analytics do not use analytics cookies.
Names, emails, companies and inquiry text from the consultation form are not included in analytics events.
Instagram-specific links use UTM parameters to identify referral sources.
Loading external video or fonts on the website may transmit technical information, including IP address and browser details, to the relevant provider.

You can block or delete cookies and site data in your browser settings.
Some features or external content may be restricted depending on your settings.

8. Privacy officer and contact

Business
MedQraft / Representative: Byeonghwi Kim
Privacy officer and inquiry contact
Byeonghwi Kim
Email
Contact@medqraft.co.kr
Postal inquiries
Suite 222, 56 Geumto-ro 80beon-gil, Sujeong-gu, Seongnam-si, Gyeonggi-do, Republic of Korea (Geumto-dong, Widen Tower)

For privacy-related complaints, you may contact the Personal Information Infringement Report Center or the Personal Information Dispute Mediation Committee for assistance.

9. Changes to this policy

Changes to processing purposes, information collected, retention periods or service providers will be published on this page with their effective date.

September 18, 2026: Website inquiry privacy policy first published

October 14, 2026: Added information on Insights visitor analytics and Instagram referral measurement